EC-COUNCIL EC-COUNCIL Certifications 412-79V10 Questions & Answers

• Question 111:

  Logs are the record of the system and network activities. Syslog protocol is used for delivering log information across an IP network. Syslog messages can be sent via which one of the following?

  A. UDP and TCP

  B. TCP and SMTP

  C. SMTP

  D. UDP and SMTP

  Correct Answer: A

• Question 112:

  Choose the correct option to define the Prefix Length.

  

  A. Prefix Length = Subnet + Host portions

  B. Prefix Length = Network + Host portions

  C. Prefix Length = Network + Subnet portions

  D. Prefix Length = Network + Subnet + Host portions

  Correct Answer: C

• Question 113:

  When you are running a vulnerability scan on a network and the IDS cuts off your connection, what type of IDS is being used?

  A. Passive IDS

  B. Active IDS

  C. Progressive IDS

  D. NIPS

  Correct Answer: B

• Question 114:

  Which one of the following is false about Wireshark? (Select all that apply)

  A. Wireshark offers some options to analyze the WEP-decrypted data

  B. It does not support decrypting the TKIP or CCMP packets

  C. In order for Wireshark to decrypt the contents of the WEP-encrypted packets, it must be given the appropriate WEP key for the network

  D. Packet Sniffer Mode

  Correct Answer: A

• Question 115:

  The Internet is a giant database where people store some of their most private information on the cloud, trusting that the service provider can keep it all safe. Trojans, Viruses, DoS attacks, website defacement, lost computers, accidental publishing, and more have all been sources of major leaks over the last 15 years.

  

  What is the biggest source of data leaks in organizations today?

  A. Weak passwords and lack of identity management

  B. Insufficient IT security budget

  C. Rogue employees and insider attacks

  D. Vulnerabilities, risks, and threats facing Web sites

  Correct Answer: C

• Question 116:

  A chipset is a group of integrated circuits that are designed to work together and are usually marketed as a single product." It is generally the motherboard chips or the chips used on the expansion card. Which one of the following is well supported in most wireless applications?

  A. Orinoco chipsets

  B. Prism II chipsets

  C. Atheros Chipset

  D. Cisco chipset

  Correct Answer: B

• Question 117:

  John, the penetration testing manager in a pen testing firm, needs to prepare a pen testing pricing report for a client.

  Which of the following factors does he need to consider while preparing the pen testing pricing report?

  

  A. Number of employees in the client organization

  B. Complete structure of the organization

  C. Number of client computers to be tested and resources required to perform a pen test

  D. Number of servers available in the client organization

  Correct Answer: C

• Question 118:

  Network scanning is used to identify the available network resources. Which one of the following is also known as a half-open scan, because a full TCP connection is never completed and it is used to determine which ports are open and listening on a target device?

  A. SYN Scan

  B. TCP Connect Scan

  C. XMAS Scan

  D. Null Scan

  Correct Answer: A

• Question 119:

  A firewall protects networked computers from intentional hostile intrusion that could compromise confidentiality or result in data corruption or denial of service. It examines all traffic routed between the two networks to see if it meets certain criteria. If it does, it is routed between the networks, otherwise it is stopped.

  

  Why is an appliance-based firewall is more secure than those implemented on top of the commercial operating system (Software based)?

  A. Appliance based firewalls cannot be upgraded

  B. Firewalls implemented on a hardware firewall are highly scalable

  C. Hardware appliances does not suffer from security vulnerabilities associated with the underlying operating system

  D. Operating system firewalls are highly configured

  Correct Answer: C

• Question 120:

  Which of the following attacks does a hacker perform in order to obtain UDDI information such as businessEntity, businesService, bindingTemplate, and tModel?

  A. Web Services Footprinting Attack

  B. Service Level Configuration Attacks

  C. URL Tampering Attacks

  D. Inside Attacks

  Correct Answer: A

  Reference: http://www.scribd.com/doc/184891017/CEHv8-Module-13-Hacking-Web- Applications-pdf (page 99)